PatchTheCVEhcl leap vulnerabilities and fixes
Recent CVEs affecting hcl leap, with upgrade or downgrade steps. 10 tracked.
Also searched as: hclleap.
hcl leap has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-04-24. Highest priority: CVE-2023-45720 (score 30/100).
- CVE-2024-30148 MEDIUM 4.1 UPGRADE Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the ser
- CVE-2024-30147 MEDIUM 6.5 UPGRADE Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed appl
- CVE-2024-30127 LOW 3.2 UPGRADE Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
- CVE-2024-30114 LOW 3.7 UPGRADE Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment.
- CVE-2024-30113 MEDIUM 6.3 UPGRADE Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application t
- CVE-2023-45720 MEDIUM 5.3 UPGRADE Insufficient default configuration in HCL Leap allows anonymous access to directory information.
- CVE-2023-37534 HIGH 7.1 UPGRADE Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters.
- CVE-2023-37516 LOW 3.2 UPGRADE Missing "no cache" headers in HCL Leap permits user directory information to be cached.
- CVE-2022-44760 MEDIUM 4.6 UPGRADE Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applicati
- CVE-2022-44759 MEDIUM 4.6 UPGRADE Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.
FAQ
How do I fix hcl leap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hcl leap being exploited right now?
None of the tracked hcl leap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hcl leap CVE should I patch first?
CVE-2023-45720 currently ranks highest (30/100): Insufficient default configuration in HCL Leap allows anonymous access to directory information..